Two Factor

two-factor · By WordPress.org
100k+ installs 4.7 (210) Updated 1 month ago v0.17.0 WP 7.0–7.1.4 PHP 7.4+

Impact score

Footprint Score across the two most representative contexts.

1 scans · last scan 2 months ago

Compare with another plugin

Homepage Score

Impact measured on the public homepage

Scan being analyzed. The score will be published once we have enough measurements.

Admin Score

Impact measured in the WordPress admin

···
—

v0.16.0 · 1 scan · Consolidated score over 90 days · 1 versions

Not enough data to publish the grade (15 scans min, currently 1).

What it adds to every page load

Added time
26 ms
Added memory
0.0 MB
SQL queries
+0
CSS/JS files
+0
External calls
0

About

The Two-Factor plugin adds an extra layer of security to your WordPress login by requiring users to provide a second form of authentication in addition to their password. This helps protect against unauthorized access even if passwords are compromised.

Important: Each user must individually configure their two-factor authentication settings.

For more information about two-factor authentication in WordPress, see the WordPress Advanced Administration Security Guide.

Read more

For more history, see this post.

Here is a list of action and filter hooks provided by the plugin:

The plugin includes a wp two-factor WP-CLI namespace for managing two-factor authentication from the command line. All commands accept a user by ID, login, or email.

Run wp help two-factor for the full list, or wp help two-factor <command> for options and examples for a specific command.

To redirect users to a specific URL after completing the two-factor challenge, use WordPress Core built-in login_redirect filter. The filter works the same way as in a standard WordPress login flow:

Description published by WordPress.org on WordPress.org, licensed under GPL-2.0-or-later.

Tags
2FA authentication MFA security totp

Screenshots

Screenshots published by WordPress.org on WordPress.org, licensed under GPL-2.0-or-later.

Two-factor options under User Profile - Shows the main configuration area where users can enable different authentication methods.
Two-factor options under User Profile - Shows the main configuration area where users can enable different authentication methods.
Email Code Authentication during WordPress Login - Shows the email verification screen that appears during login.
Email Code Authentication during WordPress Login - Shows the email verification screen that appears during login.
Authenticator App (TOTP) setup with QR code - Demonstrates the QR code generation and manual key entry for TOTP setup.
Authenticator App (TOTP) setup with QR code - Demonstrates the QR code generation and manual key entry for TOTP setup.
Backup codes generation and management - Shows the backup codes interface for generating and managing emergency access codes.
Backup codes generation and management - Shows the backup codes interface for generating and managing emergency access codes.

Per-version history

Show per-version detail (1 version)

How the plugin evolves version by version.

Version Homepage Admin Last scan
v0.16.0 — 1 scan 2 months ago

Alternatives in the same category

Other security plugins measured by the community, ranked from lightest to heaviest.

Scan history

Show individual scan log (1 scans)

Date Version Context Score Grade Time Memory
2 months ago v0.16.0 Admin 99/100 A 26 ms 0.0 MB